ZipRecruiter

Log In

1

Professional Penetration Test Jobs (NOW HIRING)

Techximius

Penetration Test Engineer

Aberdeen, MD · On-site

$165K - $195K/yr

Penetration Test Engineer Overview Tech(x) is an energized company with experienced, specialized and progressive thought leaders progressing talented professionals in areas of technology, security ...

BreachLock

Senior Penetration Tester (US)

Execute web application, API and mobile penetration tests with a focus on manual testing beyond ... professional penetration testing experience in a delivery or consulting context * Strong web ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

SkyePoint Decisions

Penetration Tester

Arlington, VA

$95K - $112K/yr

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

SkyePoint Decisions

Penetration Tester

Arlington, VA · On-site

$95K - $112K/yr

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

Peraton

Penetration Tester

Arlington, VA

$86K - $138K/yr

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

Peraton

Penetration Tester

Arlington, VA · On-site

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

Peraton

Penetration Tester

Arlington, VA

$86K - $138K/yr

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

Peraton

Penetration Tester / Active Secret

Arlington, VA · On-site

$86K - $138K/yr

Support the Red Cell Team by performing and leading penetration tests to assess the security of ... ISC2 Certified Information Security Professional (CISSP) * ISC2 Certified Cloud Security ...

next page

Showing results 1-20

All JobsProfessional Penetration Test Jobs

Professional Penetration Test information

See salary details

$22.5K

$119.9K

$168.5K

How much do professional penetration test jobs pay per year?

As of Jul 4, 2026, the average yearly pay for professional penetration test in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

Is penetration testing a good career?

Penetration testing is a valuable cybersecurity role that involves identifying vulnerabilities in computer systems and networks. It requires technical skills, knowledge of security tools, and often certifications like OSCP or CEH. The field offers strong job growth, competitive salaries, and opportunities for continuous learning.

Will pentesters be replaced by AI?

Professional penetration testers perform manual testing, analysis, and creative problem-solving that AI currently cannot fully replicate. While AI tools can assist in identifying vulnerabilities and automating repetitive tasks, human expertise remains essential for complex assessments, interpreting results, and adapting to new threats. The role is expected to evolve with technology, but not be entirely replaced by AI.

What are professional penetration testers?

Professional penetration testers, often called 'pen testers,' are cybersecurity experts who simulate cyberattacks on computer systems, networks, or applications to identify vulnerabilities before they can be exploited by malicious actors. Their job is to assess security defenses, uncover weaknesses, and provide recommendations for remediation. Penetration testers use a combination of automated tools and manual techniques, operating with permission from the organization to ensure ethical and legal compliance. Their work helps companies strengthen their security posture and protect sensitive information.

How much do pentesters get paid?

Professional penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior or specialized pentesters with certifications like OSCP or CISSP can earn higher salaries, especially in high-demand markets or with consulting firms.

What are some common challenges Professional Penetration Testers face when conducting assessments for clients?

Professional Penetration Testers often encounter challenges such as limited timeframes for comprehensive testing, varying levels of client preparedness, and restricted access to certain systems due to organizational policies. Additionally, clear communication with non-technical stakeholders can be essential to ensure findings are accurately understood and acted upon. Balancing thorough testing with minimal disruption to client operations is also a frequent consideration in this role.

What are the key skills and qualifications needed to thrive as a Professional Penetration Tester, and why are they important?

To thrive as a Professional Penetration Tester, you need in-depth knowledge of networking, operating systems, security protocols, and common vulnerabilities, often supported by a degree in cybersecurity or computer science. Proficiency with tools such as Metasploit, Burp Suite, Nmap, and certifications like OSCP or CEH are typically expected. Strong analytical thinking, problem-solving skills, and clear communication help standout testers effectively assess systems and report findings. These skills ensure accurate vulnerability identification and effective communication with stakeholders to improve overall security posture.

What is the difference between Professional Penetration Test vs Ethical Hacker?

AspectProfessional Penetration TestEthical Hacker
CertificationsOSCP, CEH, CISSPOSCP, CEH, CISSP
Work EnvironmentConducted for organizations to identify vulnerabilitiesMay include bug bounty programs, security assessments
Employer & Industry UsageCompanies, cybersecurity firms, government agenciesSecurity firms, freelance, bug bounty platforms
Search & Comparison IntentUnderstanding roles, certifications, scopeSimilar skills, broader hacking activities

Both roles require similar certifications and work in cybersecurity environments, but a Professional Penetration Test typically refers to a formal, client-specific security assessment, while an Ethical Hacker may engage in broader hacking activities, including bug bounty programs. The penetration test is a structured process, whereas ethical hacking can be more exploratory.

Can you make $500,000 a year in cyber security?

Professional penetration testers and cybersecurity experts can potentially earn $500,000 or more annually, especially with extensive experience, advanced certifications like CISSP or OSCP, and roles in high-demand industries or senior leadership positions. Achieving this level often requires specialized skills, a strong reputation, and sometimes consulting or leadership responsibilities.
What cities are hiring for Professional Penetration Test jobs? Cities with the most Professional Penetration Test job openings:
What are the most commonly searched types of Penetration Test jobs? The most popular types of Penetration Test jobs are:
What states have the most Professional Penetration Test jobs? States with the most job openings for Professional Penetration Test jobs include:
What job categories do people searching Professional Penetration Test jobs look for? The top searched job categories for Professional Penetration Test jobs are:
Professional Penetration Test jobs near you

Penetration Test Engineer

Techximius

Aberdeen, MD • On-site

$165K - $195K/yr

Full-time

Posted 16 days ago

Job description

Penetration Test Engineer

Overview

Tech(x) is an energized company with experienced, specialized and progressive thought leaders progressing talented professionals in areas of technology, security, logistics, project management, talent management and procurement. We are building our DoD and technology footprint by allowing hybrid and remote work locations, as well as flexible schedules. As a solution-based company, we foster a creative environment that welcomes new perspectives from all of our team members.

Responsibilities

  • Plan and perform vulnerability scans and assessments across on-premises, hybrid, and cloud environments.
  • Lead scanning activities for servers, endpoints, applications, and cloud infrastructure using tools such as Nessus, Security Center, Tenable.IO, Qualys WAS, and NMAP.
  • Analyze and validate scan results, correlate findings, and determine severity and risk impact to prioritize remediation efforts.
  • Collaborate with remediation teams, system owners, and senior security staff to track and resolve identified vulnerabilities.
  • Monitor and tune scan configurations, troubleshoot scan failures, and recommend optimizations for improved coverage and performance.
  • Maintain and update vulnerability tracking systems, dashboards, and compliance reports using tools like ServiceNow, SharePoint, Microsoft SQL, and PowerBI.
  • Develop reports, briefs, and metrics to communicate vulnerability status, remediation progress, and compliance standing to leadership.
  • Assist in refining policies, procedures, and workflows related to vulnerability management, security operations, and continuous monitoring.
  • Stay up to date on emerging vulnerabilities, CVEs, threat intelligence, and best practices to proactively identify risk areas and improve security controls.
  • All other duties assigned.
Qualifications
  • Hands-on experience with vulnerability scanning tools (e.g., Tenable products, Qualys, or NMAP) and interpreting technical scan results.
  • Familiarity with patch management processes, vulnerability remediation, and risk prioritization frameworks (e.g., CVSS, CISA KEV, etc.).
  • Demonstrated experience supporting vulnerability lifecycle tracking and reporting using platforms such as ServiceNow, SharePoint, or PowerBI.
  • Strong understanding of cybersecurity frameworks (e.g., NIST 800-53, NIST CSF) and basic compliance requirements.

Preferred Qualifications

  • Experience with vulnerability management in cloud environments (Azure, AWS, GCP).
  • Proficiency in scripting or automation using Python, PowerShell, SQL, or DAX.
  • Familiarity with SIEMs and security tool integration for contextualizing vulnerability data.
  • Strong communication and reporting skills, including experience presenting technical findings to non-technical audiences.
  • Proven ability to work independently and collaborate with cross-functional teams in a fast-paced environment.

Clearance:

  • A current DoD secret or higher, clearance.

Education & Experience:

  • Bachelor's degree in Cybersecurity, Information Technology, or a related field. An additional 2 years of experience may be substituted for a degree.
  • Offensive Security Certified Professional (OSCP) Certification
  • 3–10 years of experience in cybersecurity, vulnerability management, or security operations.

Location:

  • Aberdeen Proving Grounds, Maryland.
  • Monday-Friday.

Travel:

  • None

Join the Team:

Tech(x) is a customer centric team, both external and internal customers. This team supports each other to be successful on the job and in meeting the mission.